
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json)
Hash identifier: whbf+a4CY8aTCM8X8h/6/lC1yTMSOTGWJzflEAcqeQI=
Subject key identifier: B0:F7:1B:9C:5F:2F:C0:6E:61:19:3B:03:FB:FB:C7:C8:46:25:CC:BD
Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Certificate serial: 78173461F79F86203C7010FFF0DF11D9FB07B50E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
Manifest number: 013F
Signing time: Tue 21 Apr 2026 05:32:16 +0000
Manifest this update: Tue 21 Apr 2026 05:27:16 +0000
Manifest next update: Fri 24 Apr 2026 10:30:16 +0000
Files and hashes: 1: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: lFC2Hw3dCMyazPmWRwDd2KGnqfjV9PNyzAUQGlAs5KA=)
2: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: UUiIY0Q2nGP1X9XTM8Ol1qvBVgXy6sNa6+HVcf3gt20=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:17:34:61:f7:9f:86:20:3c:70:10:ff:f0:df:11:d9:fb:07:b5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36
Validity
Not Before: Apr 21 05:27:16 2026 GMT
Not After : Apr 24 10:30:16 2026 GMT
Subject: CN=B0F71B9C5F2FC06E61193B03FBFBC7C84625CCBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:29:a8:05:2f:ca:e3:b0:85:af:dd:5d:72:
0b:3f:8e:e5:dd:cc:cd:29:08:7d:85:96:c5:9a:88:
61:0c:d4:ac:61:95:5a:9a:8d:ea:65:5d:14:00:1a:
c1:e1:1e:e7:9c:96:f7:fa:1e:d2:fd:a5:33:d5:58:
e2:49:16:77:17:6b:8a:91:1e:7a:ab:23:2a:6a:6b:
aa:b8:c0:90:f8:6b:bf:0c:64:ec:24:37:e5:e3:83:
a5:c4:a7:8d:8f:cb:14:75:bd:3c:f2:44:50:24:20:
26:33:34:85:2d:47:6e:38:93:45:ef:fb:8b:7a:6e:
2a:91:c5:cf:b8:a5:c1:a3:99:9f:5d:81:f5:6e:b1:
7f:f3:e8:d8:3f:c5:38:0d:8d:51:39:73:83:3b:d8:
45:62:3e:65:8b:35:f9:81:83:6c:c0:13:84:e6:1a:
e7:d6:b8:25:23:08:e1:a7:4f:e8:4b:3d:fb:df:91:
83:3a:ea:47:1f:b6:6e:86:20:74:29:ac:5c:b6:49:
5f:53:e1:c4:2d:4c:d3:14:60:46:ee:54:4c:b4:47:
7f:a2:e8:ca:43:02:ae:5c:c5:3a:e7:8a:a4:53:21:
22:6c:2e:b1:2c:b1:fe:e9:96:56:ba:7e:ab:03:13:
9e:05:e2:bf:67:38:ba:01:d5:02:a6:6f:5b:c6:72:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F7:1B:9C:5F:2F:C0:6E:61:19:3B:03:FB:FB:C7:C8:46:25:CC:BD
X509v3 Authority Key Identifier:
keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:08:c9:95:96:1b:fe:27:34:f7:0b:14:e8:d1:22:ea:b5:
73:ae:83:f9:aa:cc:c0:ce:6a:63:c0:49:8a:a4:df:6e:e7:0a:
c8:ae:c8:a3:c0:77:39:7f:50:53:dc:34:11:87:71:70:7b:3d:
fc:4c:3e:cc:b2:b3:83:2f:0c:22:ac:5e:96:71:7d:6b:53:1e:
97:2a:c6:36:32:19:2c:e2:5f:a4:37:70:ef:d1:12:78:f0:b1:
23:92:4b:d1:0c:ef:a9:9d:88:f0:ac:23:70:70:27:4f:bf:4e:
0c:65:40:58:e3:d7:86:90:a2:4c:ba:ff:74:34:1e:56:5f:bb:
4d:d1:0a:15:25:79:85:74:c8:ed:61:f4:90:b1:24:63:ff:64:
89:4d:a2:2d:b5:ae:29:e0:c7:fb:b0:aa:40:fe:08:d4:53:81:
27:8d:64:9a:17:13:78:e2:22:a0:a8:1f:24:df:06:3c:72:e2:
68:51:4a:11:09:01:ac:a7:e6:ee:e9:57:7f:9c:5d:49:24:0c:
e8:9c:49:ac:9b:ad:7b:1d:e5:82:17:7e:c1:dd:a1:44:55:43:
f7:71:10:e2:47:b3:c5:6e:ca:22:92:e9:57:1a:ea:9b:cc:6a:
66:d0:6d:e6:2e:23:89:16:36:b0:0b:7a:95:e4:24:0c:95:49:
00:81:f6:4e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUeBc0YfefhiA8cBD/8N8R2fsHtQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky
QUNGOEUzNjAeFw0yNjA0MjEwNTI3MTZaFw0yNjA0MjQxMDMwMTZaMDMxMTAvBgNV
BAMTKEIwRjcxQjlDNUYyRkMwNkU2MTE5M0IwM0ZCRkJDN0M4NDYyNUNDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/CmoBS/K47CFr91dcgs/juXd
zM0pCH2FlsWaiGEM1KxhlVqajeplXRQAGsHhHueclvf6HtL9pTPVWOJJFncXa4qR
HnqrIypqa6q4wJD4a78MZOwkN+Xjg6XEp42PyxR1vTzyRFAkICYzNIUtR244k0Xv
+4t6biqRxc+4pcGjmZ9dgfVusX/z6Ng/xTgNjVE5c4M72EViPmWLNfmBg2zAE4Tm
GufWuCUjCOGnT+hLPfvfkYM66kcftm6GIHQprFy2SV9T4cQtTNMUYEbuVEy0R3+i
6MpDAq5cxTrniqRTISJsLrEssf7plla6fqsDE54F4r9nOLoB1QKmb1vGcga9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUsPcbnF8vwG5hGTsD+/vHyEYlzL0wHwYDVR0j
BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD
NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG
OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi
ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1
NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHBQCMmVlhv+JzT3CxTo0SLqtXOug/mqzMDO
amPASYqk327nCsiuyKPAdzl/UFPcNBGHcXB7PfxMPsyys4MvDCKsXpZxfWtTHpcq
xjYyGSziX6Q3cO/REnjwsSOSS9EM76mdiPCsI3BwJ0+/TgxlQFjj14aQoky6/3Q0
HlZfu03RChUleYV0yO1h9JCxJGP/ZIlNoi21ringx/uwqkD+CNRTgSeNZJoXE3ji
IqCoHyTfBjxy4mhRShEJAayn5u7pV3+cXUkkDOicSaybrXsd5YIXfsHdoURVQ/dx
EOJHs8VuyiKS6Vca6pvMambQbeYuI4kWNrALepXkJAyVSQCB9k4=
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:52:45 2026 by rpki-client